Skip to main content
Client access Talk to us

Latest edition

Blog · 267 analyses

Regulation, AI and cybersecurity, with sources in view.

Context for better decisions.

Analysis on AI, cybersecurity, regulation, governance and digital systems. With sources, practical consequences and one clear next action.

All analyses

All analyses

169–180 of 267

Current knowledge, organised by topic, date and practical consequence.

Conceptual editorial composition about expired kev deadline: a closed ticket does not prove the vulnerability is gone
Reopen any item without asset inventory, observed version, mitigation test, and explicit treatment of unknowns.AI-generated image under Velqory editorial direction.
Cybersecurity10 min read

Expired KEV deadline: a closed ticket does not prove the vulnerability is gone

Several recent KEV entries reached their deadlines in the first half of August. After a deadline, the useful question is no longer how many tickets were completed, but how many affected assets are no longer vulnerable or have been removed from service.

Read analysis
Conceptual editorial composition about configurable thinking in gemini 3.7 flash: budget matters only when tied to severity
Set the level by task class and failure severity, not by one global preference applied to every request.AI-generated image under Velqory editorial direction.
Artificial intelligence10 min read

Configurable thinking in Gemini 3.7 Flash: budget matters only when tied to severity

General availability of Gemini 3.7 Flash makes the amount of reasoning applied to tasks configurable. More processing may improve hard cases, but can also increase latency and cost without guaranteeing a more correct final answer.

Read analysis
Conceptual editorial composition about data act and cloud: an exit contract needs data, interfaces, time, and accountability
Accept a provider only when the exit path identifies exportable data, format, interfaces, transition period, continuity, and support.AI-generated image under Velqory editorial direction.
Regulation10 min read

Data Act and cloud: an exit contract needs data, interfaces, time, and accountability

The Data Act already requires data-processing providers to remove obstacles to switching and simultaneous use of services. Full removal of switching and egress charges arrives on 12 January 2027, but contractual and technical duties should not wait for that date.

Read analysis
Conceptual editorial composition about ai agents are breaking pam — every non-human identity needs an owner and boundary
No agent should enter production without its own identity, human owner, short-lived credential, per-tool policy, and per-action trail.AI-generated image under Velqory editorial direction.
Cybersecurity10 min read

AI agents are breaking PAM — every non-human identity needs an owner and boundary

ISACA highlighted on 14 August that the growth of agent identities is outpacing privileged-access architectures centred on people. Risk appears when an agent inherits persistent credentials, broad authority, and no identity distinguishable per execution.

Read analysis
Conceptual editorial composition about opentelemetry entity events: observe what exists and what changed
Adopt first in a domain where entity change explains incidents and a stable key exists to reconcile observed and desired state.AI-generated image under Velqory editorial direction.
Digital systems10 min read

OpenTelemetry entity events: observe what exists and what changed

OpenTelemetry published on 14 August a way to consume entity events representing hosts, interfaces, services, volumes, and changes. The goal is not to replace metrics, logs, and traces, but to fill the gap between behaviour and observed inventory.

Read analysis
Conceptual editorial composition about gemini 3.7 flash reached ga — the production gate must measure the whole task
Promote only the use case that beats the current model on the same corpus, with the same tools, limits, and success criteria.AI-generated image under Velqory editorial direction.
Artificial intelligence10 min read

Gemini 3.7 Flash reached GA — the production gate must measure the whole task

Google made Gemini 3.7 Flash generally available on 13 August and positioned it for coding and agentic workflows. The lifecycle change reduces release risk, but does not prove fitness for a specific process.

Read analysis
Conceptual editorial composition about ai act: article 50 starts with a synthetic-content inventory, not a generic badge
Classify each output by modality, organisational role, and channel before choosing metadata, visible disclosure, or both.AI-generated image under Velqory editorial direction.
Regulation10 min read

AI Act: Article 50 starts with a synthetic-content inventory, not a generic badge

The AI Act entered general application on 2 August 2026 and the Commission began enforcing the rules already in force. Generative systems placed on the market before that date have a specific transition for Article 50(2) machine-readable marking until 2 December 2026.

Read analysis
Conceptual editorial composition about postgresql fixes 28 vulnerabilities — priority depends on version and exposure
Order the update by affected version, paths actually used, administrative exposure, replication, and restore capability.AI-generated image under Velqory editorial direction.
Cybersecurity10 min read

PostgreSQL fixes 28 vulnerabilities — priority depends on version and exposure

PostgreSQL published updates for every supported branch on 13 August, reporting 28 security fixes and more than 110 bugs. Six CVEs are highlighted in the announcement, including psql command processing and logical-decoding issues.

Read analysis

How we publish

Each analysis links to the official source and says what changes in practice.

  1. 01Sources in view

    Every analysis links the official documentation it relies on.

  2. 02Operational context

    We translate change into decisions, owners and evidence.

  3. 03Continuous review

    We update the analysis when facts or guidance change.

  4. 04Identified imagery

    We disclose generated photography and credit documentary photography.

From context to execution

Is there an obligation or a system that needs to become operational?

We map the problem, write the scope and build the solution with acceptance criteria.